Vulnerabilities (CVE)

Filtered by vendor Cs-cart Subscribe
Total 24 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-0230 1 Cs-cart 1 Cs-cart 2025-04-09 7.5 HIGH N/A
PHP remote file inclusion vulnerability in install.php in CS-Cart 1.3.3 allows remote attackers to execute arbitrary PHP code via a URL in the install_dir parameter. NOTE: CVE and third parties dispute this vulnerability because install_dir is defined before use
CVE-2006-2863 1 Cs-cart 1 Cs-cart 2025-04-03 5.1 MEDIUM N/A
PHP remote file inclusion vulnerability in class.cs_phpmailer.php in CS-Cart 1.3.3 allows remote attackers to execute arbitrary PHP code via a URL in the classes_dir parameter.
CVE-2005-4429 1 Cs-cart 1 Cs-cart 2025-04-03 7.5 HIGH N/A
SQL injection vulnerability in CS-Cart 1.3.0 allows remote attackers to execute arbitrary SQL commands via the (1) sort_by and (2) sort_order parameters to index.php.
CVE-2021-32202 1 Cs-cart 1 Cs-cart 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
In CS-Cart version 4.11.1, it is possible to induce copy-paste XSS by manipulating the "post description" filed in the blog post creation page.